CVE ID :CVE-2026-103904 Published : Oct. 14, 2026, 11:16 a.m. | 16 minutes ago Description :The public consent endpoint of JTL-Shop accepts arbitrary consent names from unauthenticated visitors without validating them against the configured consent items. These names are stored in the...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-103904 - Stored XSS Vulnerability in JTL-Shop

VERWANDTEARTIKEL

PoC Released for Linux Vhost Flaw Enabling Root Privilege Escalation and VM Escape

CVE-2026-16741 - OS Command in TR7 Cyber ​​Defense's TR7 ASP

CVE-2026-82026 - Radar < 1.12.2 Missing Authorization via /api/local-terminal

CVE-2026-16740 - Missing Authentication for Critical Function in TR7 Cyber ​​Defense's TR7 ASP

CVE-2026-108291 - WordPress Affiliates plugin <= 7.0.1 - PHP Object Injection vulnerability

CVE-2026-107424 - WordPress Frontend Dashboard plugin <= 3.0.7 - Privilege Escalation vulnerability

CVE-2026-16741 - OS Command in TR7 Cyber Defense's TR7 ASP

CVE-2026-16740 - Missing Authentication for Critical Function in TR7 Cyber Defense's TR7 ASP